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Description 

1. Field of the Invention 

The present invention relates to the field of data 
processing, and in particular, to the prevention of unau- 
thorized duplication of digital information on one storage 
medium to another. Furthermore, the present invention 
restricts the use of information on an original medium to 
one or more designated devices without introducing any 
key which is independent of the characteristics of the 
media. 

2. Description of the Related Art 

Prior art copy protection schemes rely principally on 
either software based methods, hardware keys or a 
combination thereof. Software based methods use en- 
cryption techniques to prevent conventional copying 
programs from making unauthorized usable copies. Un- 
less the appropriate decryption key is found on a storage 
medium, the programs on the storage medium cease to 
function. By storage medium, the present invention re- 
fers to all types of non-volatile storage medium. Exam- 
ples of such media include floppy disks, hard disks, op- 
tical disks and other non-volatile semiconductor storage 
devices. Lately, new generation of copying programs 
are sufficiently sophisticated such that most software 
previously protected by copy protection schemes are 
copied without the authorization of the information pro- 
vider. 

Hardware key methods employ an explicit key on 
the system hardware to enable the programs in the sys- 
tem. One such method uses as key the hardware serial 
number or identification number. A second method re- 
quires the user to buy a special kind of hardware with 
every purchase of software. Thus whenever a new soft- 
ware is required, the necessary hardware has to be 
plugged into the system hardware. As such, the number 
of concurrent software that can be run on a particular 
system is limited by the number of such special hard- 
ware that can be simultaneously connected to the sys- 
tem hardware. 

An example of a combination of software based 
method and hardware key is U.S. Patent No. 4.903.296 
which claims copy protection of software on magnetic 
medium with a special key having two marks made on 
the surface of the medium. These marks are not pro- 
ducible by conventional disk drives and are in the form 
of absence of material and in the form of domains which 
cannot be formed by conventional magnetic disk write 
heads. Additionally, an encrypted key which is critical 
for running the application is built into a special purpose 
hardware subsystem. Finally the hardware subsystem 
is required to decrypt the key. 

Another patent is U.S. Patent No. 4.866,769 which 
claims a method of copy protection of personal compu- 
ter software distributed in diskettes through the use of 



an unique klentification stored in read only memory of 
a personal computer. A source ID is provided with every 
software distributed. The personal computer ID is used 
with the source I D on the distribution diskette to produce 
s an encoded check word, using any available encryption 
method. This check word is then used to verify that the 
software is being used on the designated personal com- 
puter. 

Computer Technology Review, No. 3, April 1984. at 

10 page 239 discloses a manufacturing technique called 
fingerprinting of diskettes. In this scheme, blank dis- 
kettes are physically altered before the program is for- 
matted onto them. The program is then scrambled, or 
encrypted, by using the fingerprints so the user has to 

IS unlock the program before it will run. To free the pro- 
gram, the user inserts the original disk into the computer 
At 10K prgram on the zero track then instructs the op- 
erating system to search for the fingerprint on the sur- 
face of the diskette. Once it has verified that the original 

20 disk is in the system the computer decrypts the program, 
allowing free access to the user. 

To prevent unauthorized copying and use of infor- 
mation, prior art copy protection schemes require either 
introducing artificial indica as software keys or requiring 

25 special hardware subsystems. Not only are these solu- 
tions more costly to both the information providers and 
the users as they require additional processing steps but 
they are also incompatible with the trend of encouraging 
concurrent use of different types of information in a net- 

30 work environment. Furthermore, the prior art copy pro- 
tection schemes are restrictive in that they prevent un- 
authorized copying and use of only software in magnetic 
medium. 

3S Summary of the Invention 

According to one aspect of the present invention 
there is provided a method for preventing unauthorized 
use of infomnation stored on a storage medium, the stor- 
40 age medium having nonunifomnlties and uniformities, 
the nonuniformities not being artificially introduced on 
the medium, the method comprising the steps of : 

a) generating a signature from the nonuniformities 
of the storage medium; 



b) incorporating the signature into an encryption key 
and encrypting the information prior to distributing 
the storage medium; 

c) permitting access to the storage medium by an 
output device in response to verification of the sig- 
nature; and 

d) generating a decryption key with the signature 
for decrypting the information and permitting ac- 
cess to the information by the device. 
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The present invention is a method for preventing 

unauthorized copying and use of information which is 
stored on a storage medium and for restricting the use 
of such information to designated devices. Copy protec- 
tion is achieved by generating a signature from a given 
storage medium. The signature is derived from an arbi- 
trarily selected list of nonuniformities, uniformities and 
their attributes. The selected list may contain nonuni- 
formities at any granularity level. As such, this signature 
is unique to a given storage medium in the same way 
finger prints are unique to a human being. This signature 
is used to derive a key for encrypting the information on 
the storage medium. Any copying of the distribution in- 
formation from one storage medium to another results 
in the mutation of the signature required to decrypt the 
information. Therefore, the present invention obviates 
the need for introducing artificial indica or requiring a 
special hardware subsystem for achieving a copy pro- 
tection scheme. 

Restricting the usage of information on a distribu- 
tion medium to a designated device is achieved by ver- 
ifying the device ID (DID-D) of the device with the device 
ID (DID-S) stored in the distribution medium before the 
decryption and transfer of information are undertaken. 
Decryption of the information is accomplished by gen- 
erating a key from both the signature of the distribution 
medium and the DID-S. 

Brief Description of the Drawings 
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FIG. 1 is a model of Information dissemination. 
FIG. 2 . illustrates sample nonuniformities on a stor- 
age medium. 

FIG. 3 shows a selected list of nonuniformities on 
the storage medium as in FIG. 2. 

FIG. 4 illustrates sample nonunifomnities on anoth- 
er storage medium. 

FIG. 5 shows the nonuniformities pattern from a bit 
by bit copying of the nonuniformities from the 
storage medium in FIG. 2 to that in FIG. 4, 

FIG. 6A shows the steps an information provider pre- 
pares a distribution package in accordance 
to the preferred embodiment of the present 
invention. 

FIG. 6B illustrates the flow diagram of the list gener- 
ating program (LGP) used in the preferred 
embodiment of the present invention. 

FIG. 6C illustrates the flow diagram of the signature 
generating program (SGP) used in the pre- 
ferred embodiment of the present invention. 

FIG. 7A illustrates the steps an information consum- 
er accesses and uses the information from 
the distribution package prepared in FIGS. 
6A - 6C. 

FIG. 78 illustrates the flow diagram of the signature 
verification program (SVP) used in the pre- 
ferred embodiment of the present invention. 



Detailed Description of the Invention 

A method for utilizing medium nonuniformities to 
prevent the unauthorized duplication and use of digital 

s information is described. In the following description, nu- 
merous specific details are set forth such as bit pattern 
and program steps, etc. in order to provide a thorough 
understanding of the present invention. It will be obvious 
to one skilled in the art that the present Invention may 

TO be practised without these specific details. In other in- 
stances, well-known steps such as those involved with 
encryption and decryption of data are not shown in order 
not to obscure the present inventton. 

IS Notation and Nomenclature 

The detailed description with respect to the copy 
protection scheme using medium signature is presented 
partially In terms of algorithm and symbolic representa- 
tion upon operation on data bits within the computer 
memory. These algorithmic descriptions and represen- 
tations are the means used by those skilled in the art of 
data processing to most effectively convey the sub- 
stance of their work to others skilled in the art. 

An algorithm is here, and generally, conceived to be 
a self-consistent sequence of steps leading to a desired 
result. These steps are those require physical manipu- 
lation of physical quantities. Usually, though not neces- 
sarily, these quantities take the form of electrical or mag- 
netic signals capable of being stored, transferred, com- 
bined, and othenwise manipulated. In this case, the 
physical quantities are voltage signals which corre- 
spond to the inf ormatton being distributed. It proves con- 
venient at times, principally for reason of common us- 
age, to refer to these signals as bits, values, elements, 
symbols, characters, terms, numbers or the like. It 
should be borne in mind, however, that all of these and 
similar terms are to be associated with the appropriate 
physical quantities and are merely convenient labels ap- 
plied to these quantities. 

Further, the manipulations performed are often re- 
ferred to in terms such as adding or comparing, which 
are commonly associated with the mental operations 
performed by a human operator. No such capability of 
a human operator is necessary, or desirable. In most 
cases, in any of the operations described herein which 
form part of the present invention, the operations are 
machine operations. Useful machines for performing 
the operations of the present invention include general 
purpose digital computers or similar devices such as 
digital signal processors. In all cases, It should be borne 
in mind that there is a distinction between the method 
operation in operating a computer or other apparatus 
and the method of computation itself. The present in- 
55 vention relates to method steps for preventing unauthor- 
ized use of distributed information via medium signature 
to generate other desired physical signals. 

The present invention can be implemented with an 
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apparatus for performing these operations. This appa- 
ratus may be specially constructed for the required pur- 
pose or it may comprise a general purpose computer as 
selectively activated or reconfigured by a computer pro- 
gram stored in the computer The algorithms presented 
herein are not inherently related to any particular com- 
puter or other apparatus. In particular, various general 
purpose machines may be used with programs written 
in accordance with the teachings herein, or it may prove 
more convenient to construct specialized apparatus 
such as digital signal processor to perform the required 
method steps. The required structure for a variety of 
these machines would appear from the description giv- 
en below. 

GENERAL SYSTEM CONFIGURATION 

A general model of information dissemination is 
shown in FIG. 1 . Here, the information provider 10 refers 
to a supplier of all types of information including but not 
restricted to software, video, audio, graphics or any 
combination thereof. The transmission channel 20 rep- 
resents the means and more specifically the media 
through which information is delivered to the information 
consumer 30 over paths 15 and 25. The transmission 
channel 20 includes but is not limited to any communi- 
cation links such as computer network, satellite links, 
diskettes, optical disks or other storage medium. It 
should also be understood by one skilled in the art that 
the term information consumer is interchangeable with 
any user of information. 

Any storage medium such as magnetic disk or op- 
tical disk has physical nonunifomnities due to imperfec- 
tions in the fabrication of such medium. FIG. 2 illustrates 
sample nonuniformities 41 - 47 on a storage medium 
such as a disk 40. That the nonuniformities shown in 
FIGS 2 - 5 are similar in pattern and size to each other 
are for the sake of simplicity and should not be taken as 
a limitation upon the scope of the present invention. 
Similarly the circular shape of the storage medium 40 is 
representative of a general class of storage media. In 
general nonuniformities occur in all types of non-volatile 
storage media. As the manufacturing processes 
achieve greater tolerances, these nonuniformities may 
be minimized but not likely to be eliminated entirely. Re- 
ferring again to FIG. 2, nonuniformities 41 - 47 are de- 
tected with a nonuniformities detection program (NDP). 
The details of the NDP shall be elaborated further below. 

FIG. 3 shows a selected list of nonuniformities 41. 
42, 45 and 47 being generated by a list generating pro- 
gram (LGP) after receiving the outputs from the NDP 
By selected list, the present invention refers to a com- 
bination of the nonuniformities and/or the uniform bits 
on the storage medium 40. As will be described in detail 
below, the selected list will be used to generate a signa- 
ture when the outputs of the LGP is fed into a signature 
generating program (SGP). The details of the SGP shall 
be elaborated further below. By signature, the present 



invention refers to the result of applying a f unctkxi to the 
selected list. Such a function uses the attributes of a 
group of elements in the selected list. By attributes, this 
invention refers to the characteristics of bits on a storage 
s medium which includes but not restricted to the track 
number, sector number, length, readability and writabil- 

ity. 

FIG. 4 shows the nonuniformities 51 • 55 of a sec- 
ond storage medium 50. Just as the storage medium 40 

10 in FIGS 2 and 3, the storage medium 50 is represented 
by a circular disk. For purpose of differentiating nonuni- 
fomiities 41 - 47 in FIGS 2 and 3, nonuniformities 51 - 
55 in FIG 4 are shown to be In circular in shape as op- 
posed to rectangular in shape. It should be understood 

15 by one skilled in the art that the nonuniformities on stor- 
age media 40 and 50 may have the same attributes. 
However, the chances of the number of nonuniformities 
and their attributes on the respective storage media are 
exactly the same are very remote. Moreover, the stor- 

20 age 40 in FIGS 2 and 3 can be a magnetic disk while 
the storage medium 50 in FIG 4 can be an optical disk. 

FIG. 5 shows the overlapped nonuniformities pat- 
tern when a bit by bit copy of the storage medium 40 is 
made onto the storage medium 50. Referring to FIG. 5, 

25 the resulting pattern represents a nonuniformities pat- 
tern that is different from that in FIGS 3 and 4. It is this 
unique signature of storage medium which the present 
invention takes advantage of. Hitherto, the data 
processing field has focused Its efforts In masking the 

30 nonuniformities in order to store software and data reli- 
ably. Where there are single bit or a small number of bit 
nonuniformities, schemes such as Reed Solomon cod- 
ing techniques are used to store and retrieve data with 
reasonable accuracy. In contrast, the present invention 

35 exploits the nonuniformities of storage medium to gen- 
erate a signature which is unique for a given storage 
medium. 



PREFERRED EMBODIMENT OF THE PRESENT 
40 INVENTION 



1. Preparation of distribution package 

FIG. 6 illustrates the manner in which a package of 
45 information is prepared by an Information provider once 
the information consumer agrees to the terms of an in- 
formation distribution contract. Typically, a distribution 
package contains the distributed information (Dl) in an 
encrypted form together with supporting information 
50 (SI). By Dl the present embodiment refers to information 
being distributed by the information provider. In general. 
Dl does not include software which assists in gaining 
access to the present embodiment. In contrast, SI refers 
to all the enabling programs of the present embodiment 
55 along with other necessary software and data. The Dl 
and SI may reside on a single storage medium. Alterna- 
tively, they can be stored on different storage media. For 
example, the SI can reside on more than one storage 
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media. Normally only the Dl Is encrypted. However, en- 
cryption of all or part of SI may be done if necessary. 

In FIG. 6A the information provider scans in step 60 
a storage medium for nonuniformities using a nonuni- 
formities detection program (NDP). The NDP scans the 
medium and determines the locations of the nonuni- 
formities of the medium. Typically, an NDP reads a given 
location on a storage medium, tests whether there are 
any nonuniformities due to the manufacturing process. 
These nonuniformities manifest themselves in many 
ways. The NDP returns a value of a location as either 
"good' or 'badV In general, a 'bad' location is one which 
cannot be used for storing a chosen bit of information. 
Some form of NDP are used in MS-DOS® Format Com- 
mand and Norton Utilities®. MS-DOS is a registered 
trademark of Microsoft Corporation and Norton Utilities 
is a registered trademark of Peter Norton. 

The output from the NDP in step 60 is provided as 
input to step 70 where a selected list is generated by a 
list generating program (LGP). FI G. SB is a flow diagram 
of the LGP used in a preferred embodiment of the 
present invention. In step 65 an integer 'k' is chosen 
based on the characteristics of the storage medium e. 
g.. type, capacity or otherwise. The LGP then examines 
the output from the NDP in step 66. Thereafter "k" ele- 
ments from the nonuniformities are selected at random. 
At the same time, "k" elements of the uniform bits which 
are not on the nonuniformities list are also selected at 
random in step 67. The two chosen lists are permuted 
randomly in step 69 before it is outputted as the selected 
list in step 71. The LGP also supplies the attributes of 
the locations chosen. 

Referring again to FIG. 6A, the selected list from 
LGP in step 70 is furnished as input to step 80 where a 
signature generating program (SGP) applies a pre-de- 
termined function to the selected list to derive a signa- 
ture for the storage medium in question. FIG. 6C is a 
flow diagram of the SGP used in a preferred embodi- 
ment of the present invention. As mentioned in the pre- 
ceding paragraph, the output from the LGP, the selected 
list, is supplied as input to the SGP in step 81 . Here, the 
SGP fetches some p re-determined attributes of the el- 
ements from the storage medium. Next, the SGP ap- 
plies a pre-determTned function to the list with the at- 
tributes in step 83. Finally, in step 65 the result of the 
manipulation by the pre-determined function in step 83, 
i.e. the signature, is supplied as input to step 90 in FIG. 
6A. It should be understood by one skilled in the art that 
the function utilized by the SGP could be a mathematical 
or some other pre-determined manipulation. 

In FIG. 6A, together with the signature of the stor- 
age medium, the present embodiment reads the storage 
medium's identification (DID-S) in step 90 in order to 
generate a key for encrypting the Dl and/or SI in step 
100. Here, the encryption key is generated by a encryp- 
tion key generation program (EKGP). The details of 
EKGP depends on the particular encryption/decryption 
(EP/DP) scheme employed. In general, EKGP applies 



8 

a pre-determined function or manipulation to the medi- 
um signature to generate a string to the key specification 
of the EP/DP scheme used. EP and DP will be described 
further below. Next, the Dl is read in step 110 and en- 

s crypted with the key generated in step 100 using a EP 
in step 120. The output of step 120 Is the encrypted dis- 
tributed information (EDI). The EP/DP can be any of the 
known methods of encryption and decryptbn. One such 
example is DES. See D.E.R. Denning, Cryptography 

10 arid Data Security Addision-Wesley. Reading, MA, 
1983. In step 130. the information provider decides 
whether to put the EDI and SI in one or more distributton 
medium. Furthemnore, the information provider decides 
whether to encrypt any of the SI. In step 140, the dlstri- 

15 bution package is then send out to the information con- 
sumer. 

2. Access of information 

20 FiGS 7A-B illustrates the manner in which the infor- 
mation consumer accesses and uses the infomriation 
contained in the distribution package prepared in the 
section above. In FIG. 7 the Information consumer reads 
in the file containing the selected list (SLF) from the dis- 

25 tribution medium in step 150. The output from step 150 
is used as an input to step 160 where the SGP is em- 
pbyed to generate the signature for the storage medi- 
um. Next, in step 170 the signature of the distributbn 
medium Is verified. In particular, when a storage medium 

30 is presented to a read/write peripheral, a program called 
signature verification program (SVP) is invoked. The 
SVP checks whether the signature of the medium is 
identical to the signature Indicated in the distributbn 
package. Referring to FIG. 78, in step 171 the SVP 

35 reads the signature S^ from the distribution medium. 
The SVP then relies on NDP. LDP and SGP to generate 
the signature Sg of the distributbn medium in step 173. 
The outputs of step 171 and 173 are compared in step 
175. If there is no match, then a condition of incorrect 

40 signature Is indicated In step 177. There are two possi- 
bilities for the incorrect signature: (1) a read/write pe- 
ripheral fails to transfer the nonuniformities from the dis- 
tribution medium to a copied medium, or (2) the storage 
medium is a copied or unauthorized medium. Both out- 

4S comes are detected by the SVP In step 175. It follows 
that an evade program is invoked in step 180 to halt the 
program altogether. 

Assuming that there Is a match of the signatures in 
step 1 75, then the present embodiment reads the devbe 

50 ID (Dl D-R) from the infomriatton consumer's device and 
from the designated storage device (DID-S) as shown 
in step 190 of FiG. 7A. Next, the ID of the designated 
device is authenticated in step 200 by the device verifi- 
cation program DVP. The DID-R from the information 

ss consumer's device Is compared with the stored DID-S 
for the designated device. If there is no match, an evade 
program is enabled as an unauthorized device is found 
in step 210. Othenwise, the positive matching of the de- 
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vice IDs in step 200 activates the decryption key gener- 
ating program (DKGP) in step 220. Just as the EKGP In 
FIG. 6A, the implenr^entation ol DKGP depends on the 
particular EP/DP schenne employed. Referring again to 
FIG7A, the signature of the distribution medium and 
DID-S are inputs to the DKGP or other decryption key 
generating program. The DKGP generates the decryp- 
tion key (DK). With the decryption key from step 220. 
the present embodiment enables the infomnation con- 
sumer to decrypt the encrypted information (EDI). It 
should be understood by one skilled in the art that the 
output from DK is the distributed information (Dl) in its 
natural or clear form. Finally the distributed information 
is transferred to the designated device in step 240. 

While the present invention has been described 
particularly with reference to FIGS. 1 to 7 with emphasis 
on a method for utilizing medium nonuniformities to min- 
imize unauthorized duplication of information in a distri- 
bution environment, it should be understood that the fig- 
ures are for illustration only and should not be taken as 
a limitation on the invention. In addition, it is clear that 
the method of the present invention has utility In many 
applications where copy protection of infomiation is re- 
quired. It is contemplated that many changes and mod- 
ifications may be made by one of ordinary skill in the art 
without departing from the scope of the invention as 
claimed. 
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1 . A method for preventing unauthorized use of infor- 
mation stored on a storage medium, the storage 
medium having nonuniformities and uniformities, 
the nonuniformities not being artificially introduced 
on the medium, the method comprising the steps of : 

a) generating (80) a signature from the nonuni- 
formities of the storage medium; 

b) incorporating (100) the signature into an en- 
cryption key and encrypting (120) the informa- 
tion prior to distributing the storage medium; 

c) permitting access to the storage medium by 
an output device in response to verificatfon 
(170) of the signature; and 

d) generating (220) a decryption key with the 
signature for decrypting the information and 
permitting access to the information by the de- 
vice. 

2. A method according to claim 1 wherein the device 
for which access to the infornriation is permitted has 
a device Identification (ID) and wherein: 

in step b), the device identification (ID) is also 
incorporated (100) into the encryption key; in step 



c), access to the storage medium by the device is 
in response to verification (170. 200) of the signa- 
ture and the device identification (ID) of the device; 
and in step d), the decryption key is generated (220) 
with the signature and the device kJentification (ID). 

3. The method as defined in any preceding claim, 
wherein the method is for preventing the unauthor- 
ised use of digital information. 

4. The method as defined in any preceding claim, 
wherein the information is encrypted in part or in to- 
tal. 

15 5. The method as defined in any preceding claim, 
wherein the signature is a function of a list which 
comprises the nonuniformities, uniformities and 
their attributes. 

20 6. The method as defined in claim 5 wherein the list is 
a subset of all of the nonuniformities and their at- 
tributes. 

7. The method as defined in claim 6, wherein said sub- 
26 set is arbitrarily selected. 

8. The method as defined in claim 6. wherein said sub- 
set is selected non arbitrarily. 

30 9. The method as defined in any preceding claim for 
use in a system for distributing information wherein 
said information includes distributed information 
(Dl) and supporting infomnation (SI). 
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PatentansprQche 

1. Verfahren zum Verhindem einer unauthorisierten 
Venwendung von auf einem Speichermedium ge- 
speicherter Information, wobei das Speichermedi- 
um Nicht-Uniformitaten und Uniformitaten aufweist, 
die Nicht-Uniformitaten nicht kunstlich auf das Me- 
dium auf gebracht sind, und das Verfahren folgende 
Schritte umfaBt: 

a) Erzeugen (80) einer Signatur aus den Nicht- 
Uniformitaten des Speichermediums; 

b) Einbringen (100) der Signatur in einen Ver- 
schlOsselungsschlusseln und VerschlOsseIn 
(120) der Information vor dem Herausgeben 
des Speichermediums; 

c) ErIauben eines Zugriffs auf das Speicherme- 
dium durch eine Ausgabeeinrichtung in Antwort 
auf eine Verifikation (170) der Signatur, und 

d) Erzeugen (220) eines EntschlOsselungs- 
schlussels mit der Signatur zum EntschlOsseIn 
der Information und zum ErIauben des Zugriffs 
auf die Infomr^ation durch die Einrichtung. 
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2. Verfahren nach Anspruch 1 , bel welchem die Ein- 
richtung. fur die Zugritf auf die Intormation gestattet 
wird. eine Einrichtungsidentifizierung (ID) autweist. 

und bei welchem: 

im Schritt b) die Einriclitungsidentifizierung 
(ID) ebentalls in den VerschlOsselungsschlOssel 
eingebracht wird (100); im Schritt c) der Zugriff auf 
das Speichermedium durch die Einrichtung in Ant- 
wort auf die Verifikation (170. 200) der Signatur und 
der Einrichtungsidentifizierung (ID) der Einrichtung 
erfolgt; und im Schritt d) der EntschlOsselungs- 
schlussel mit der Signatur und der Einrichtungs- 
identifiziemng (ID) erzeugt wird (220). 

3. Verfahren nach einem der vorhergehenden Anspru- 
che. bei welchem das Verfahren dem Verhindern 
der unauthorisierten Venwendung digitaler Informa- 
tion dient. 

4. Verfahren nach einem der vorhergehenden Anspru- 
che. bei welchem die Information teilweise Oder 
vollstandig verschlOsselt wird. 

5. Verfahren nach einem der vorhergehenden AnsprO- 
Che, bei welchem die Signatur eine Funktion einer 
Liste ist, welche die Nicht-Uniformitaten, Uniformi- 
taten und deren Attribute umfa3t. 

6. Verfahren nach Anspruch 5. bei welchem die Liste 
eine Teilmenge von alien Nicht-Uniformitaten und 
deren Attributen ist. 

7. Verfahren nach Anspruch 6, bei welchem die Teil- 
menge willkOriich ausgewahit wird. 

8. Verfahren nach Anspruch 6, bei welchem die Teil- 
menge nicht WillkOriich ausgewahit wird. 

9. Verfahren nach einem der vorhergehenden AnsprO- 
che zur Venwendung in einem System zum Vertei- 
lenvon Infomriation. wobeidiese Information verteil- 
te Information (Dl) und Tragerinformation (SI) um- 
faBt. 
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de les rdpartir vers le milieu de stockage ; 

c) permettre un acc6s au milieu de stockage 
par un dispositif de sortie en r^ponse k una v6- 
rification (170) de la signature ; et 

d) produire (220) une cl6 de d6cryptage avec 
la signature pour d6crypter les informations et 
permettre un accds aux informations par le dis- 
positif. 

Proc6d6 selon la revendication 1 , dans lequel le dis- 
positif pour lequel un acc^s aux informations est 
autoris6 comporte une kJentification de dispositif 
(ID), etdans lequel : 

^ r^lape b). r identification de dispositif (ID) 
est 6galement incorpor6e (100) dans la cl6 de 
cryptage ; ^ l'6tape c). un accfes au milieu de stoc- 
kage par le dispositif se fait en r6ponse k une veri- 
fication (170, 200) de la signature et de I'identifica- 
tion de dispositif (ID); et & r6tape d), la cl6 de d6- 
cryptage est produite (220) avec la signature et 
I'identification de dispositif (ID). 

Proc6d6 selon I'unequelconque des revendications 
pr6c6dentes. dans lequel le proc6d6 est destin6 h 
6vlter un usage non-autoris6 d'informations num§- 
riques. 



4, Proc6d6 selon I'une quelconque des revendications 
pr6c6dentes, dans lequel les informations sont 

30 crypt6es partiellement ou totalement. 

5. Proc6d§ selon I'unequelconque des revendications 
pr6c6dentes, dans lequel la signature est fonction 
d'une liste qui comprend les non-uniformit6s, les 
uniformit6s et leurs attributs. 



35 



40 



45 



Revendications 

1. Proc6d6 pour empdcher un usage non-autoris6 
d'informations stock6es sur un milieu de stockage, 
le milieu de stockage comportant des non-uniformi- 
tds et des uniformit6s. les non-uniformit6s n'6tant 
pas introduites artificiellement dans le milieu, ce 
proc6d6 comprenant les 6tapes suivantes : 

a) produire (80) une signature k partir des non- 
uniformit6s du milieu de stockage ; 

b) incorporer (100) la signature dans une cl6 de 
cryptage et crypter (1 20) les informations avant 



50 



6. Proc6d6 selon la revendication 5, dans lequel la lis- 
te est un sous-ensemble de toutes les non-unifor- 
mitds et de leurs attributs. 

7. Proc6d6 selon la revendication 6, dans lequel le 
sous-ensemble est s6lectionn6 arbitrairement. 

8. Proc6d6 selon la revendication 6. dans lequel le 
sous-ensemble est s6lectionn6 non-arbitrairement. 

Proc6d6 selon I'une quelconque des revendications 
pr6c6dentes. destin6 k 6tre utilise dans un systems 
pour rdpartir des informations dans lequel les infor- 
mations comprennent des informations rdparties 
(Dl) et des informafions support (SI). 
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Choose an Integer "k" based on the characterlsllc of 
the medium e.g. type, capacity. 



Examine the List 
output by NOP 



Pick "k" elements from this 
Ncnunlformitles List al random 
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Pick "k" uniform bits, not in the 
ncnunlformitles list, at random 
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Randomly permute this 
picked list of elements 




Figure 6B 
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